Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier: sV3Bgiw1q6o1qFWiV4c/BvYNCcc3GnN7uIPT7j7HRqw=
Subject key identifier: FE:4D:4D:CC:35:A9:50:51:4D:CC:41:0B:21:2B:AD:12:C3:B1:8E:0F
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 0194BB973C8A372945885752FDCA3B0B66D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 09:00:38 +0000
Manifest this update: Fri 31 Jan 2025 09:00:38 +0000
Manifest next update: Sat 01 Feb 2025 09:00:38 +0000
Files and hashes: 1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: BUpMmI+8TfJ4Qq0j24k83dJy9HejcTeG2rqY9tiMZgY=)
2: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (hash: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=)
3: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (hash: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:3c:8a:37:29:45:88:57:52:fd:ca:3b:0b:66:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jan 31 09:00:38 2025 GMT
Not After : Feb 1 09:00:38 2025 GMT
Subject: CN=fe4d4dcc35a950514dcc410b212bad12c3b18e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:bf:d1:58:56:43:52:95:cf:1d:ae:57:1a:
5e:78:bc:e5:74:6a:2d:a2:f2:4c:fb:20:46:19:9f:
07:88:19:7d:ae:a7:42:1e:00:c9:25:7d:f0:98:a4:
1f:a4:de:f3:a7:80:3d:08:68:f6:71:30:1b:3c:98:
49:83:1c:85:27:28:6c:2e:86:0c:81:b5:8f:2c:bc:
5f:cc:e3:c5:ac:4e:27:88:64:4c:e6:be:65:31:23:
13:75:5a:1f:d6:74:4f:f8:98:95:f1:63:7c:e6:e8:
32:7d:54:06:42:94:e6:45:24:10:ce:8f:9d:e2:5a:
7f:da:de:36:f4:2d:f6:ed:f2:bb:70:ea:7e:21:9e:
bf:24:a8:a5:db:05:67:2d:d6:00:ee:59:e6:c7:c3:
cc:b8:21:3c:ef:79:c9:3c:9a:87:1c:d9:a9:de:6d:
b9:c0:37:70:b7:61:67:88:4b:83:fb:3f:9a:04:af:
4b:24:5e:9d:dc:78:ed:5b:14:3f:f9:2d:c7:b3:27:
e3:97:d2:54:34:c0:77:a3:6e:f7:7c:80:56:06:45:
3e:f2:dd:b9:d8:49:64:6f:47:6b:f4:63:63:f8:92:
80:79:8a:14:ee:27:df:04:95:bf:05:72:02:0e:f8:
09:e9:18:6b:83:af:87:98:b1:23:df:ca:20:16:16:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:4D:CC:35:A9:50:51:4D:CC:41:0B:21:2B:AD:12:C3:B1:8E:0F
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:aa:14:0e:d3:f6:f8:d8:92:ec:6e:e7:49:a0:b2:71:cd:f7:
fa:b4:9d:43:72:ce:56:d1:de:e6:11:8d:a5:47:6c:fe:22:8d:
8f:b6:41:f7:65:3f:5e:40:6a:d5:33:9e:cb:0c:8d:38:1b:fb:
c1:18:fd:15:fa:56:11:29:ae:bf:c2:2c:73:70:9c:a4:54:cf:
9b:eb:86:89:08:5a:94:c8:13:88:20:60:bc:ee:5b:ea:66:15:
50:b7:22:05:16:9b:84:ee:30:64:71:48:ec:02:05:3d:54:b4:
be:94:c4:05:98:9c:32:08:eb:4e:cd:df:9f:40:64:52:cc:52:
e8:87:72:d5:6f:c7:66:8d:98:80:c4:01:a2:c2:6a:f2:b2:5b:
16:7e:c2:7a:11:e9:dc:99:c2:4e:31:fb:93:9f:fe:61:fe:ec:
07:ab:4e:73:01:7d:cd:90:b2:14:08:a6:4e:36:44:b4:4c:75:
4e:56:e1:f5:f7:89:80:9f:4d:2c:df:2e:96:22:9e:b5:15:79:
93:30:5b:f1:54:95:54:45:08:68:45:36:59:b9:9b:f5:08:73:
ef:2b:15:13:3c:00:3d:f3:0f:26:82:c7:60:4c:47:fd:3c:46:
d0:a1:a0:34:94:d5:d6:75:2a:e2:ee:9f:4c:8e:a1:87:32:a5:
de:4f:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:15 2025 by rpki-client on console-fra.rpki-client.org